diff --git a/intakes/intakes.md b/intakes/intakes.md index c265094..8b83347 100644 --- a/intakes/intakes.md +++ b/intakes/intakes.md @@ -50,3 +50,41 @@ closed_at: '2026-09-01T19:00:23.889023Z' outcome: absorbed state_hub_intake_id: 01a05e52-d5ed-7ad5-8573-f7a857a90b3b ``` + +## WHITEHAT-IN-0002 — Triage Gate House ASM T-01–T-10 executable targets + +```yaml +id: WHITEHAT-IN-0002 +kind: intake +title: Triage Gate House ASM T-01–T-10 executable targets +status: open +origin: cross-repo +origin_ref: gate-house GH-WP-0001-T06 / message 8229c9a4-862f-4d55-842c-5c95702f79d9 +priority: high +owner: whitehat-security +requested_by: gate-house +source_message_id: 8229c9a4-862f-4d55-842c-5c95702f79d9 +specification: asm-assurance-targets.v1 +reporting_contract: conformance-reporting.v1 +authorizes_probe: false +description: 'Gate House (GH-WP-0001-T06, commit 8cb7250) published executable ASM + assurance targets T-01 through T-10 and the conformance-reporting.v1 return contract. + Specs: gate-house/docs/assurance/asm-t01-t10-executable-targets.md, gate-house/docs/assurance/asm-targets.yaml, + gate-house/docs/contracts/conformance-reporting.md. This fulfills their side of + the T-01-T-10 split named in WHITEHAT-IN-0001: they specify the invariant; this + repository owns attack design, execution, and the verdict. REQUESTED: triage each + Canon test into this repository''s work structure — applicability, target surface, + known-bad calibration, and result route — preserving the Canon test id. Current + whitehat-target/v1 approval classes are E2, E3, and capacity, not ASM; mapping or + extending that schema is this repository''s decision. Acceptance, revision, rejection, + or split are all valid. This handoff authorizes no fixture, live probe, target, + credential, or packet. Every run remains under the rules of engagement and a dated + engagement. Outcomes return to gate-house under conformance-reporting.v1 with subject + [GH-CONFORMANCE] @; implementation findings still + route through risk-nexus. Tests: T-01 Malicious Model; T-02 Credential Exfiltration; + T-03 Human Disconnect; T-04 Policy Self-Modification; T-05 Confused Deputy; T-06 + Approval Replay; T-07 Circuit Breaker; T-08 Audit Reconstruction; T-09 Audit Failure; + T-10 Revocation Closure.' +created: '2026-09-01T22:52:47.291284Z' +updated: '2026-09-01T22:52:47.291284Z' +```